Repro:
1. Run with --use-cross-process-frames-for-guest
2. Select text some text.
3. Try and drag/drop the text elsewhere.
Expected:
Drag and drop works.
Actual:
Crash on drag start
[138260:138260:0511/121521:FATAL:render_widget_host_view_child_frame.cc(197)] Check failed: false.
#0 0x7ff678304c3e base::debug::StackTrace::StackTrace()
#1 0x7ff678366d8f logging::LogMessage::~LogMessage()
#2 0x7ff671c38272 content::RenderWidgetHostViewChildFrame::GetNativeView()
#3 0x7ff671fd5484 content::GetScaleFactorForView()
#4 0x7ff67210e598 content::RenderViewHostImpl::OnStartDragging()
#5 0x7ff672115430 _ZN4base20DispatchToMethodImplIPN7content18RenderViewHostImplEMS2_FvRKNS1_8DropDataEN5blink16WebDragOperationERK8SkBitmapRKN3gfx8Vector2dERKNS1_19DragEventSourceInfoEEJS4_S8_S9_SD_SG_EJLm0ELm1ELm2ELm3ELm4EEEEvRKT_T0_RKSt5tupleIJDpT1_EENS_13IndexSequenceIJXspT2_EEEE
#6 0x7ff672115325 _ZN4base16DispatchToMethodIPN7content18RenderViewHostImplEMS2_FvRKNS1_8DropDataEN5blink16WebDragOperationERK8SkBitmapRKN3gfx8Vector2dERKNS1_19DragEventSourceInfoEEJS4_S8_S9_SD_SG_EEEvRKT_T0_RKSt5tupleIJDpT1_EE
#7 0x7ff6721152cf _ZN3IPC16DispatchToMethodIN7content18RenderViewHostImplEMS2_FvRKNS1_8DropDataEN5blink16WebDragOperationERK8SkBitmapRKN3gfx8Vector2dERKNS1_19DragEventSourceInfoEEvSt5tupleIJS3_S7_S8_SC_SF_EEEEvPT_T0_PT1_RKT2_
#8 0x7ff6721122d9 _ZN3IPC8MessageTI30DragHostMsg_StartDragging_MetaSt5tupleIJN7content8DropDataEN5blink16WebDragOperationE8SkBitmapN3gfx8Vector2dENS3_19DragEventSourceInfoEEEvE8DispatchINS3_18RenderViewHostImplESE_vMSE_FvRKS4_S6_RKS7_RKS9_RKSA_EEEbPKNS_7MessageEPT_PT0_PT1_T2_
#9 0x7ff67210d542 content::RenderViewHostImpl::OnMessageReceived()
#10 0x7ff67211eb23 content::RenderWidgetHostImpl::OnMessageReceived()
#11 0x7ff6720e92a3 content::RenderProcessHostImpl::OnMessageReceived()
#12 0x7ff66fff3968 IPC::ChannelProxy::Context::OnDispatchMessage()
#13 0x7ff66fff8106 _ZN4base8internal15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS2_7MessageEEE3RunIS4_JS7_EEEvRK13scoped_refptrIT_EDpOT0_
#14 0x7ff66fff801e _ZN4base8internal12InvokeHelperILb0EvNS0_15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS3_7MessageEEEEE8MakeItSoIJRK13scoped_refptrIS5_ES8_EEEvSB_DpOT_
#15 0x7ff66fff7fcd _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1EEEENS0_9BindStateINS0_15RunnableAdapterIMN3IPC12ChannelProxy7ContextEFvRKNS6_7MessageEEEEFvPS8_SB_EJSF_SB_EEENS0_12InvokeHelperILb0EvSE_EEFvvEE3RunEPNS0_13BindStateBaseE
#16 0x7ff6782e4e3e base::Callback<>::Run()
#17 0x7ff67830a68e base::debug::TaskAnnotator::RunTask()
#18 0x7ff6783840ec base::MessageLoop::RunTask()
#19 0x7ff678384388 base::MessageLoop::DeferOrRunPendingTask()
#20 0x7ff6783845e2 base::MessageLoop::DoWork()
#21 0x7ff67839beac base::MessagePumpGlib::HandleDispatch()
#22 0x7ff67839c671 base::(anonymous namespace)::WorkSourceDispatch()
#23 0x7ff669614e04 g_main_context_dispatch
#24 0x7ff669615048 <unknown>
#25 0x7ff6696150ec g_main_context_iteration
#26 0x7ff67839bfaf base::MessagePumpGlib::Run()
#27 0x7ff678383adf base::MessageLoop::RunHandler()
#28 0x7ff678430b34 base::RunLoop::Run()
#29 0x7ff67905139f ChromeBrowserMainParts::MainMessageLoopRun()
#30 0x7ff6719483e9 content::BrowserMainLoop::RunMainMessageLoopParts()
#31 0x7ff671952475 content::BrowserMainRunnerImpl::Run()
#32 0x7ff671942096 content::BrowserMain()
#33 0x7ff6734f6a66 content::RunNamedProcessTypeMain()
#34 0x7ff6734f8ce2 content::ContentMainRunnerImpl::Run()
#35 0x7ff6734f5b22 content::ContentMain()
#36 0x7ff678f47362 ChromeMain
#37 0x7ff678f47312 main
#38 0x7ff6640cfec5 __libc_start_main
#39 0x7ff678f47211 <unknown>
Comment 1 by creis@chromium.org
, May 11 2016Labels: OS-All
Summary: <webview> OOPIF: StartDragging hits NOTREACHED (was: <webivew> OOPIF: StartDragging crashes)